安全编排、自动化和响应 (SOAR)
2024 年，Fortinet 再次荣膺 KuppingerCole SOAR 领导力指南针报告“创新冠军”和“领导者”称号
获取报告 免费产品演示
概述
FortiSOAR 搭载集中事件管理和海量分析活动自动化优势，助力 IT/OT 安全团队高效抵御各类攻击，有效开展威胁调查和事件响应。将 FortiSOAR 部署为运营中心，有利于标准化并执行相关工作流，推动最佳实践落地，支持分析师专注关键任务，保护组织安全。
为何选择 FortiSOAR？
FortiSOAR 可大幅缓解安全团队工作负担，无需同时管理大量安全工具，无需调查大量告警，无需进行大量手动和重复流程，加快响应速度。部署 FortiSOAR，您可实现 IT/OT 安全操作和任何关键企业功能的集中化、标准化和自动化。FortiSOAR 凭借广泛集成、海量丰富的应用场景功能、数百个预构建工作流和简单的 Playbook 创建优势，支持您量身定制一流运维流程，满足各类安全运营需求。
下载解决方案简报
FortiAI：全过程生成式 AI 支持
FortiAI 采用自然语言和生成式 AI，指导、简化并自动执行安全分析师工作流程。FortiAI 与 FortiSOAR 分析师操作界面无缝集成，可为威胁调查、响应及 Playbook 构建等任务提供智能支持并加速执行。FortiAI 与 FortiSOAR 基于机器学习的推荐引擎协同工作，助力安全团队做出更明智的决策，快速应对威胁，即使面对最复杂的任务也能显著节省时间。
阅读 FortiAI 博客
企业和安全托管服务提供商（MSSP）的理想之选
FortiSOAR 支持丰富功能、灵活部署和弹性许可，对企业和安全托管服务提供商（MSSP）都极具吸引力。企业可灵活选择 SaaS、本地、公有云托管或可信安全托管服务提供商（MSSP）合作伙伴不同部署模式，为您提供无差别强大功能。FortiSOAR 分层、分布式、多租户和共享租户以及本地代理服务模式，全力支持全球企业及安全托管服务提供商（MSSP）所需的各种运营模式。
下载 FortiSOAR MSSP 解决方案简报功能与优势
全面的解决方案
500 + 产品集成、800 个 Playbook、丰富的强大功能和应用场景解决方案，高效支持 SOC/NOC/OT 运营效率
AI 驱动的安全运营
FortiAI 与推荐引擎协同运作，指导并自动执行分析师工作、Playbook 创建等流程
内置威胁情报
内置 FortiGuard Labs 全球情报
和公开情报源充实调查分析并赋能响应行动
内容中心和社区
众多连接器、Playbook、解决方案包、最佳实践视频和社区，共同助力用户获得持续优势
创建无代码/低代码 Playbook
专利设计经验支持直观拖放和快速开发模式，快速创建 Playbook
灵活的部署选项
用户可灵活选择 SaaS、本地、公共云托管或可信安全托管服务提供商（MSSP）合作伙伴不同部署模式，为您提供无差别强大功能。
FortiSOAR 应用场景
安全事件管理
实现告警调查与响应的集中化、标准化和自动化。运用全套作战室工具，快速应对各类攻击。
NOC 响应和优化
跨多供应商安全解决方案触发自动修复和防御措施。自动执行任意 NOC 任务。
OT 安全自动化
通过资产和漏洞管理、威胁响应 Playbook 以及全面的 OT 生态系统集成优势，提高 OT 安全性。
资产与漏洞管理
跟踪 IT/OT 资产，评估安全风险，并实现变更管理工作流自动化。跟踪 CSV，基于风险等级进行优先级排序，并自动进行威胁修复。
员工与运营管理
自动分配任务，管理队列和计划。根据 SLA 协议跟踪并报告指标和团队绩效。
提升企业整体运营效率
通过灵活简单的自定义操作和 Playbook 创建，为任意应用场景提供最佳实践标准，并提高运营效率。
赢得用户和企业分析师广泛认可
2025 年 Gartner Peer Insights™ 客户之选
KuppingerCole SOAR 领导力指南针报告
Fortinet SecOps Fabric ESG 经济验证报告
98% 的评论者推荐，获得 4.9/5 的高分*
Fortinet 获评 2025 年 Gartner Peer Insights™ 安全编排、自动化和响应 (SOAR) 解决方案“客户之选”殊荣。Fortinet 在所有类别中均表现优异——包括产品功能、支持/交付、用户推荐意愿、评论数量以及评论市场覆盖率。
*基于截至 2024 年 11 月 30 日的 18 个月内 87 条评价
2024 年，Fortinet 再次荣膺 KuppingerCole SOAR 领导力指南针报告“创新冠军”和“领导者”称号
本报告深入概述了安全编排、自动化和响应（SOAR）市场、重要趋势和供应商详细比较，帮助读者选择最适合自身需求的解决方案。
凭借支持 GenAI、OT 环境、合规性和 IT/NOC 运营的高级功能，以及在企业、政府和服务提供商组织中的高部署率优势，FortiSOAR 市场领导地位获得显著提升。
Fortinet 安全运营解决方案的量化优势
随着企业的不断发展、新技术的不断涌现以及网络犯罪分子持续引入更多复杂攻击，安全领导者及其团队在保护组织网络方面面临重重挑战。企业战略组（Enterprise Strategy Group）研究团队在最新发布的报告中，详细介绍了企业部署 Fortinet 安全运营解决方案后获得的诸多优势，包括提高运营效率和构建更有效的风险管理体系。
下载报告 »
Gartner Peer Insights™ 官网用户真实评论
Fortinet 始终以用户为中心。我们非常荣幸获评 2025 年 Gartner Peer Insights™ 安全编排、自动化和响应 (SOAR) 解决方案“客户之选”殊荣。截至 2024 年 11 月 30 日，98% 的 Fortinet 评论者表示愿意推荐 Fortinet，在 87 条评论中，我们获得了 4.9/5 的高分。
FortiSOAR 在企业级网络中的变革力量
我们运用超过 100 个 Playbook 和 50 多个连接器，轻松集成安全控制机制，以获取信息并提供统一管控平台。FortiSOAR 通过提供作战指挥室、模块构建器和精细化基于角色的访问控制 (RBAC)，有效解决了安全协作中的复杂性问题。它帮助我们将组织内的所有团队无缝连接起来。
借助 FortiSOAR 安全集成提升生产力
从事件管理到威胁趋势报告再到自动化，我们能够通过 FortiSOAR 满足近 100% 的需求。我们通过集成 10 余款安全工具、网络、基础设施及其他产品，构建了开展安全行动的 Playbook。平均修复时间 (MTTR) 得以缩短，生产力得以提升。
高性价比与卓越的产品支持令人印象深刻
性能出色。这项支持服务非常棒。设计团队在创建正确的 BOQ 方面提供了帮助。他们与技术团队一起，密切跟进各类问题及技术工单，并为提交的工单提供切实可行的解决方案。
通过 FortiSOAR 重塑 OT 环境安全
我们当时需要的是一项能够通过整合整个 OT 生态系统来协助我们进行威胁响应的技术……FortiSOAR 我们在自身环境中实现了深度的整合。我们不仅能够满足自身需求，更能实现对 OT 资产及其关联漏洞的深入可见性。
化解安全告警疲劳的颠覆性创新
我们曾疲于应付泛滥的告警，团队难以有效处理每日触发的海量告警。我使用 FortiSOAR 的体验非常出色，这项卓越的安全技术是当今网络安全时代不可或缺的利器。
利用 FortiSOAR 进行有效的漏洞评估与修复
FortiSOAR 最突出的功能是 FortiAI，通过它我们可以使用非专业语言询问如何处理收到的告警；根据事件详情，FortiAI 会推荐修复措施，如果需为此创建 Playbook，FortiAI 也能协助构建。
案例研究
众多知名工业企业、政府机构和安全服务提供商均部署 FortiSOAR 自动化事件管理解决方案，并将其作为安全运营的强大支持。
400 多家企业、政府机构和 MSSP 客户
FortiSOAR 支持 SaaS 部署，或以虚拟机 (VM) 、容器模式部署在本地、私有云和公有云中，或作为 FortiCloud 托管私有解决方案部署。无论您正寻找任务关键型 SOC 平台，还是随运营持续扩展的一站式 SaaS 解决方案，FortiSOAR 都是助您优化安全运营的正确选择。
阅读安全网络防御案例研究
资源
解决方案简报
技术参数表
分析师报告
电子书
视频
Optimize Security Operations with FortiSOAR »
FortiSOAR enables organizations to centralize, standardize, and automate IT/OT security operations and critical enterprise functions.
FortiSOAR: Optimize OT Security Operations »
Whether you’re extending your SOC to protect OT or growing the cybersecurity capabilities of your OT control center, FortiSOAR is key to your OT security posture, threat responsiveness, and SecOps efficiency.
Optimize MSSP Operations with FortiSOAR »
Given that speed matters more than ever as malicious actors advance their efforts, organizations are also demanding rapid and in-depth detection and analysis capabilities from the MSSP services they use.
Automating Regulatory Compliance with FortiSOAR »
FortiSOAR can centralize and automate compliance activities and end-to-end processing, ensuring timely compliance while allowing analysts to focus on attack investigation and response.
Make FortiSIEM and FortiSOAR the Foundation of Your Modern SOC »
Security teams can adopt FortiSIEM and FortiSOAR to provide advanced enterprisewide threat detection, complete incident management capabilities, and critical SOC functions, all based on AI and automation.
Amplify Security Operations Efforts and Accelerate Response With FortiSOAR »
The evolving threat landscape and organizational complexities are creating obstacles for security operations center (SOC) teams and potentially leaving organizations exposed to attack.
ESG Economic Validation: The Quantified Benefits of Fortinet Security Operations Solutions »
Improved Security Team Operational Efficiency and Reduced Risk to the Organization, Each by Up to 99%
KuppingerCole Leadership Compass for SOAR »
Fortinet was named #1 Innovator and a Leader again in the 2024 KuppingerCole Leadership Compass for SOAR.
Improve Security Operations Across the Security Fabric »
The Security Operations Center (SOC) Automation Model is designed to help security teams identify appropriate Fortinet security products for their SOC, based on their existing investment in people and processes.
SOAR Through Implementation »
Security operations teams face the challenge of maintaining the longevity of their security infrastructures against the evolving threat landscape and operational complexities.
生态系统
FortiSOAR 无缝集成 500 多种多供应商产品，助您轻松新建连接器。访问 FortiSOAR Content Hub（内容中心），查看完整列表并了解更多信息。
Amazon Web Services
AWS services are trusted by more than a million active customers around the world – including the fastest growing startups, largest enterprises, and leading government agencies – to power their infrastructures, make them more agile, and lower costs.
Learn more on the Fortinet-AWS alliance
Anomali
Anomali delivers high-fidelity threat intelligence from diverse sources to Fortinet, providing the contextualized threat intelligence and triggers necessary to prioritize and initiate an incident response, and when paired with event data, allowing your SOC analysts to focus on the real threats, rather than false positives.
Arcanna.ai
Arcanna.ai is a cutting-edge company specializing in AI-driven decision-making platforms, enhancing incident management and response to empower businesses with intelligent solutions. The integration between Arcanna.ai and Fortinet combines Fortinet's robust cybersecurity infrastructure with Arcanna.ai's AI-powered decision-making platform, delivering unparalleled efficiency and accuracy in threat detection, response automation, and incident management to empower organizations with a seamless, proactive, and resilient security posture.
Armis, Inc.
Armis the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Our real-time and continuous protection sees the full context of all managed, unmanaged, and IoT devices, including medical devices, operational technology, and industrial control systems.
- Blog - FortiGate Integration
- Blog - Armis and Fortinet Partnership
- Armis FortiSOAR
- Partner Interview Video
- Solution Brief - Security
- Solution Brief - Healthcare
Attivo Networks
Attivo Networks is an award-winning innovator in cyber security defense. As the leader in deception-based threat detection technology, Attivo empowers continuous threat management using dynamic deceptions for the real-time detection, analysis, and accelerated response to cyber incidents.
Axonius
Axonius is the cybersecurity asset management platform that gives organizations a comprehensive asset inventory, uncovers security coverage gaps, and automatically enforces security policies. Together with Fortinet, customers can analyze all assets on their network and automatically enforce policies when assets deviate from policies.
Braintrace
Braintrace, a leader in offering next-generation cybersecurity products and services, understands that data security and privacy are paramount. To this end, Braintrace focuses its efforts on detecting threats inside encrypted traffic. Requiring only a minimal set of datapoints, DragonflyNTA integrates with Fortinet products to identify network threats with real-time analytics.
Cisco
Cisco is the worldwide leader in IT that helps companies seize the opportunities of tomorrow by proving that amazing things can happen when you connect the previously unconnected.
Cloud Range
Cloud Range is the industry’s leading cyber preparedness simulation platform that reduces exposure to cyber risk across the organization. Fortinet and Cloud Range have partnered to provide cybersecurity teams with full-service, live-fire simulation exercises designed explicitly for OT/ICS, IT, IoT, and converged environments.
Criminal IP
Criminal IP delivers comprehensive cyberthreat intelligence, empowering security teams to analyze and assess potential threats with precision. Leveraging advanced AI and OSINT capabilities, the solution provides in-depth reputation data, threat scoring, and real-time detection of malicious indicators such as C2, IOCs, and other critical threats across IP addresses, domains, and URLs. By utilizing its API-driven architecture, Criminal IP seamlessly integrates into existing security workflows, enhancing threat visibility, automation, and response efficiency for organizations. Criminal IP and Fortinet have partnered to deliver an industry-leading security solution that streamlines threat intelligence operations. The integration of Criminal IP’s comprehensive threat intelligence platform with FortiSOAR—enabled through the Fabric-Ready Technology Partner Program in the Fortinet Open Ecosystem—delivers automated threat intelligence enrichment capabilities that enhance security teams’ ability to detect and respond to threats.
培训和认证
Fortinet 认证专业人员 - 安全运营
In this course, you will learn about FortiSOAR architecture, and how to deploy, configure, manage, operate, and monitor FortiSOAR in a SoC environment.
其他培训
In this course, you will learn how to use FortiSOAR to design simple to complex playbooks, examine the role of FortiSOAR in mitigating malicious indicators, and learn how to create interactive dashboards to display relevant information about alerts and incidents. You will also learn how to integrate FortiSOAR with FortiGate, FortiSIEM, and FortiMail.
Gartner, Gartner Peer Insights ‘Voice of the Customer’: Security Orchestration, Automation and Response, Peer Contributors, 6 February 2025
Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Gartner and Peer Insights™ are trademarks of Gartner, Inc. and/or its affiliates. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.
